Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xhJRvfPDQzZDNApqA1VaWcIilB8.roa
File: xhJRvfPDQzZDNApqA1VaWcIilB8.roa (raw, json)
Hash identifier: AM69+2AFHNJoRxtJus0fc1wo24y3z47gDGXbBb/8ng0=
Subject key identifier: C6:12:51:BD:F3:C3:43:36:43:34:0A:6A:03:55:5A:59:C2:22:94:1F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2236F2A1A2F8BB5C7FE569825BB82
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xhJRvfPDQzZDNApqA1VaWcIilB8.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60468
IP address blocks: 81.15.206.0/23 maxlen: 23
81.15.248.0/22 maxlen: 22
88.220.86.0/23 maxlen: 23
88.220.144.0/22 maxlen: 22
194.183.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:23:6f:2a:1a:2f:8b:b5:c7:fe:56:98:25:bb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c61251bdf3c3433643340a6a03555a59c222941f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:05:3c:88:2c:5d:a3:a3:25:c1:65:a9:ed:
7b:9d:ff:84:be:31:40:a3:ac:2f:36:32:ba:79:65:
37:16:43:ea:af:92:e0:ce:38:36:23:bf:1d:0d:43:
b9:27:f9:47:27:ac:f1:c4:af:7c:1f:ef:55:23:c7:
98:db:e8:b3:bb:f6:96:64:37:bf:89:0b:ce:25:f0:
11:b9:3c:98:f0:7b:fe:39:c9:66:6c:e2:ad:8b:b1:
0a:a2:9e:93:5c:d3:9b:66:f7:6e:d2:33:1a:16:5c:
f0:5c:13:7b:3b:62:cf:fd:58:bb:ae:d3:9d:b7:35:
bd:21:b7:14:b0:08:21:74:6b:a2:e1:07:f0:7e:c4:
3a:88:50:f7:80:47:2b:62:a9:23:a8:0d:5c:ba:94:
35:3e:a7:2d:a9:3e:75:aa:51:f5:56:5a:09:eb:26:
e7:8f:7f:82:9d:4a:00:73:bf:9b:d7:75:e3:cb:62:
4f:7e:e9:3c:a0:74:f7:c3:55:45:c5:3d:08:40:c4:
90:df:c1:10:25:7f:70:76:77:dd:5c:6f:09:ce:f2:
25:3b:08:15:cb:a8:83:c7:c4:05:54:7e:8a:54:a9:
a6:85:09:cc:b5:44:25:ff:7c:48:c9:9e:ff:79:ff:
40:72:5f:cf:26:05:48:26:96:a2:12:cb:76:05:4d:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:51:BD:F3:C3:43:36:43:34:0A:6A:03:55:5A:59:C2:22:94:1F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xhJRvfPDQzZDNApqA1VaWcIilB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.206.0/23
81.15.248.0/22
88.220.86.0/23
88.220.144.0/22
194.183.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:8f:cc:7e:ed:af:97:57:01:93:df:ea:48:a8:38:89:74:1e:
3e:30:70:50:af:c1:3e:2d:1c:be:c2:0f:42:9f:41:a3:78:62:
b8:91:52:7f:ef:58:e3:bb:69:05:ac:c7:3e:15:a8:de:a0:1a:
40:51:15:37:ea:96:17:ac:5c:d1:11:9f:b9:b5:a2:9a:c0:e2:
a0:21:82:45:28:25:3f:72:5b:56:71:12:fa:36:e9:55:02:ed:
bf:6d:fc:75:7a:b3:bc:19:d2:60:42:03:0a:9e:76:50:bb:0b:
d4:ab:c4:1f:b6:75:d5:3b:d8:75:5d:c8:fd:db:19:ac:90:de:
35:d8:de:51:cc:83:93:19:ad:ca:51:68:34:c6:35:83:e9:d8:
72:39:5c:b7:89:e8:b6:3d:12:5d:76:f6:bf:a9:5d:6e:e1:4a:
a8:fe:31:29:f2:12:27:d3:ae:92:22:f2:cf:51:6d:aa:3e:6d:
e6:bf:6a:7d:15:95:15:3d:17:27:cb:bd:bf:28:4f:be:ab:3e:
34:1a:09:c1:92:ab:ed:ce:3c:00:04:39:c6:10:69:66:ef:ae:
33:3b:d3:91:7d:3f:2f:2e:37:5b:9a:b4:71:66:22:13:f7:68:
56:c1:d3:4c:9f:07:93:9f:b5:a7:48:0b:f4:82:0c:8f:ce:00:
73:d6:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:59 2025 by rpki-client